---
title: "POST /v1/{+parent}/targetservers"
method: POST
path: "/v1/{+parent}/targetservers"
tags: ["organizations"]
---

# POST /v1/{+parent}/targetservers

`POST /v1/{+parent}/targetservers`

Creates a TargetServer in the specified environment.

## Path parameters

- `parent` string, required

## Query parameters

- `name` string

## Request body

- GoogleCloudApigeeV1TargetServer — TargetServer configuration. TargetServers are used to decouple a proxy TargetEndpoint HTTPTargetConnections from concrete URLs for backend services.
  - `sSLInfo` GoogleCloudApigeeV1TlsInfo — TLS configuration information for virtual hosts and TargetServers.
    - `enabled` boolean — Required. Enables TLS. If false, neither one-way nor two-way TLS will be enabled.
    - `protocols` string[] — The TLS versioins to be used.
    - `trustStore` string — The resource ID of the truststore.
    - `ciphers` string[] — The SSL/TLS cipher suites to be used. For programmable proxies, it must be one of the cipher suite names listed in: http://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites. For configurable proxies, it must follow the configuration specified in: https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration. This setting has no effect for configurable proxies when negotiating TLS 1.3.
    - `enforce` boolean — TLS is strictly enforced.
    - `keyAlias` string — Required if `client_auth_enabled` is true. The resource ID for the alias containing the private key and cert.
    - `ignoreValidationErrors` boolean — If true, Edge ignores TLS certificate errors. Valid when configuring TLS for target servers and target endpoints, and when configuring virtual hosts that use 2-way TLS. When used with a target endpoint/target server, if the backend system uses SNI and returns a cert with a subject Distinguished Name (DN) that does not match the hostname, there is no way to ignore the error and the connection fails.
    - `commonName` GoogleCloudApigeeV1TlsInfoCommonName
      - `wildcardMatch` boolean — Indicates whether the cert should be matched against as a wildcard cert.
      - `value` string — The TLS Common Name string of the certificate.
    - `clientAuthEnabled` boolean — Optional. Enables two-way TLS.
    - `keyStore` string — Required if `client_auth_enabled` is true. The resource ID of the keystore.
  - `port` integer — Required. The port number this target connects to on the given host. Value must be between 1 and 65535, inclusive.
  - `description` string — Optional. A human-readable description of this TargetServer.
  - `name` string — Required. The resource id of this target server. Values must match the regular expression
  - `host` string — Required. The host name this target connects to. Value must be a valid hostname as described by RFC-1123.
  - `isEnabled` boolean — Optional. Enabling/disabling a TargetServer is useful when TargetServers are used in load balancing configurations, and one or more TargetServers need to taken out of rotation periodically. Defaults to true.
  - `protocol` 'PROTOCOL_UNSPECIFIED' | 'HTTP' | 'HTTP2' | 'GRPC_TARGET' | 'GRPC' | 'EXTERNAL_CALLOUT' — Immutable. The protocol used by this TargetServer.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/apigee.md) · [All operations](https://skmtc.net/google/apis/apigee/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/apigee/versions/6e272fa448a7/schema)